PC starts "NT Admin" shutdown sequence while on Internet

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I just had my hard drive reformatted due to virus problem. Installed Windows XP Home, Office XP, MSN 9 dial-up, with McAfee VirusScan. All software locally loads and operates fine. However, when I go to MSN to read my email, after a couple minutes, I get a message as though I had a System Administrator (I don't--this is my home PC), telling me there is an NT system error and the server (there isn't any) will be closing down in 30 seconds. It not only knocks me off the Internet, it shuts down my PC
What's going on?
 
Hi TREATY,

If it's an RPC Shutdown initiated by NT Authority, then it's most likely due
to the MSBlaster worm or the Welchia worm.

Have a look here for information about the Blaster worm and its variants:
http://www.microsoft.com/security/incident/blast.asp

And here is information about the Welchia worm:
http://tinyurl.com/kdp6

You need to d/load and install Security patch KB824146, available here:
http://support.microsoft.com/?kbid=824146#WinXP

Also, d/load and run the Blaster and Welchia worm removal tool:
http://support.microsoft.com/default.aspx?scid=833330


Regards,

--
Patti MacLeod
Microsoft MVP - Windows Shell/User

TREATY said:
I just had my hard drive reformatted due to virus problem. Installed
Click to expand...
Windows XP Home, Office XP, MSN 9 dial-up, with McAfee VirusScan. All
software locally loads and operates fine. However, when I go to MSN to read
my email, after a couple minutes, I get a message as though I had a System
Administrator (I don't--this is my home PC), telling me there is an NT
system error and the server (there isn't any) will be closing down in 30
seconds. It not only knocks me off the Internet, it shuts down my PC.
 
You have been infected with the MS Blaster worm or a variant. If you did
not turn on the Windows XP firewall or a similar firewall after reloading XP
you were infected soon after going onto the internet.

To stay on-line long enough to get the necessary updates, patches,
and removal tools, click Start > Run, and enter "shutdown -a" when the
next RPC countdown begins. This will abort the shut down. Also, make
sure you've enabled a firewall before starting, to preclude any more
intrusions while getting the updates/patches/tools.


Microsoft Security Bulletin MS03-39
http://support.microsoft.com/?kbid=824146

What You Should Know About the Blaster Worm
http://www.microsoft.com/security/incident/blast.asp

W32.Blaster.Worm a.k.a. W32/Lovesan.Worm
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.html

W32.Blaster.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html

W32.Welchia.Worm a.k.a. W32/Nachi.Worm
http://securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

W32.Welchia.Worm Removal Tool
http://www.symantec.com/avcenter/venc/data/w32.welchia.worm.removal.tool.html

McAfee AVERT Stinger
http://us.mcafee.com/virusInfo/default.asp?id=stinger


The above info was copied from a previous post by Bruce Chambers (Thanks
Bruce)


TREATY said:
I just had my hard drive reformatted due to virus problem. Installed
Click to expand...
Windows XP Home, Office XP, MSN 9 dial-up, with McAfee VirusScan. All
software locally loads and operates fine. However, when I go to MSN to read
my email, after a couple minutes, I get a message as though I had a System
Administrator (I don't--this is my home PC), telling me there is an NT
system error and the server (there isn't any) will be closing down in 30
seconds. It not only knocks me off the Internet, it shuts down my PC.
 
TREATY said:
I just had my hard drive reformatted due to virus problem. Installed Windows XP Home, Office XP, MSN 9 dial-up, with McAfee VirusScan. All software locally loads and operates fine. However, when I go to MSN to read my email, after a couple minutes, I get a message as though I had a System Administrator (I don't--this is my home PC), telling me there is an NT system error and the server (there isn't any) will be closing down in 30 seconds. It not only knocks me off the Internet, it shuts down my PC.
What's going on?
Click to expand...

In addition to follow the other very good advice, you need a good
firewall like ZoneAlarm -- free at
http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

or enable the built-in xp firewall. The advantage of ZoneAlarm is the
control over both inbound and outbound traffic that the interface gives
you. You can stop programs from 'phoning home.'
 
Back
Top